NSA Guidance and Secure Cloud Computing ISE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of conducting regular security audits in a cloud environment as recommended by NSA guidance?

   • ATo increase the complexity of the cloud environment
   • BTo replace the need for continuous monitoring
   • CTo identify and remediate security weaknesses before they are exploited
   • DTo satisfy the cloud provider's requirements, not the customer's
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which practice is essential for meeting compliance requirements in a cloud environment according to NSA guidance?

   • AMaintaining comprehensive audit logs of all security-relevant activities
   • BDisabling audit logging to protect sensitive information
   • CRelying on the cloud provider's compliance certifications without verifying
   • DDeleting logs after 30 days to reduce storage costs
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A government contractor is storing sensitive data in a public cloud. The NSA guidance emphasizes data protection. Which measure is most important to implement?

   • AUse a private cloud to avoid the need for encryption.
   • BEncrypt data at rest and in transit, and manage encryption keys separately from the data.
   • CRely on the cloud provider's default encryption settings.
   • DEncrypt data only at rest, and store keys with the data for convenience.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services firm must meet regulatory auditing requirements in the cloud. The NSA guidance recommends continuous monitoring and audit logging. Which approach best satisfies these requirements?

   • AEnable basic logging for a few resources and store logs locally on each VM.
   • BRely on the cloud provider's compliance certifications without additional logging.
   • CEnable detailed audit logging for all critical resources and retain logs for the required period.
   • DDisable logging to reduce storage costs and avoid data retention issues.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A cloud architect is designing a secure architecture for a new application. The NSA guidance recommends using a zero-trust model. Which architectural choice best reflects zero-trust principles?

   • AVerify every access request regardless of source.
   • BTrust all traffic within the corporate network.
   • CRely on perimeter firewalls for all security.
   • DUse a VPN for all remote access but no additional controls.
   Reveal Solution Discussion Select an answer first